CVEs published in July 2020
2,061 vulnerabilities, 222 critical, 16 exploited.
augeasOSS-FuzzUNKNOWN READ in eval_exprNo score- apple icloud, icloud for windows, ios +8 more +10 moreA logic issue was addressed with improved state management. This issue is fixed in iOS 13.6 and...6.1 Medium
- apple icloud, icloud for windows, ios +8 more +10 moreAn access issue existed in Content Security Policy. This issue was addressed with improved access...6.5 Medium
- apple icloud, icloud for windows, ios +8 more +10 moreA use after free issue was addressed with improved memory management. This issue is fixed in iOS...9.8 Critical
- apple icloud, icloud for windows, ios +8 more +10 moreAn out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13...4.3 Medium
- apple icloud, icloud for windows, ios +8 more +10 moreA use after free issue was addressed with improved memory management. This issue is fixed in iOS...8.8 High
- apple icloud, icloud for windows, ios +8 more +10 moreA command injection issue existed in Web Inspector. This issue was addressed with improved...7.8 High
- debian linux, gnu grub2, canonical ubuntu linux +13 more +15 moreGRUB2 contained integer overflows when handling the initrd command, leading to a heap-based buffer overflow.5.7 Medium
- gnu grub2, canonical ubuntu linux, debian linux +12 more +14 moreGRUB2 contains a race condition leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing.6.4 Medium
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreMozilla developers and community members reported memory safety bugs present in Firefox 78 and...8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe code for downloading files did not properly take care of special characters, which led to an...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreJIT optimizations involving the Javascript arguments object could confuse later optimizations....8.8 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreA redirected HTTP request which is observed or modified through a web extension could bypass...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen in an endless loop, a website specifying a custom cursor using CSS could make it look like...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreAn iframe sandbox element with the allow-popups flag could be bypassed when using noopener links....6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreBy observing the stack trace for JavaScript errors in web workers, it was possible to leak the...6.5 Medium
- gnu grub2, canonical ubuntu linux, opensuse leap +4 more +6 moreThere is an issue with grub2 before version 2.06 while handling symlink on ext filesystems. A...5.7 Medium
- gnu grub2, canonical ubuntu linux, opensuse leap +4 more +6 moreThere is an issue on grub2 before version 2.06 at function read_section_as_string(). It expects a...5.7 Medium
- gnu grub2, open source grub, opensuse leap +2 moreThere's an issue with grub2 in all versions before 2.06 when handling squashfs filesystems...6.7 Medium
- gnu grub2, open source grub, opensuse leap +2 moreIn grub2 versions before 2.06 the grub memory allocator doesn't check for possible arithmetic...6.4 Medium
- gnu grub2, open source grub, debian linux +2 more +4 moreA flaw was found in grub2, prior to version 2.06. An attacker may use the GRUB 2 flaw to hijack...8.2 High
- freediameterAn exploitable denial of service vulnerability exists in the freeDiameter functionality of...7.5 High
- gambio gxGambio GX before 4.0.1.0 allows SQL Injection in admin/gv_mail.php.4.9 Medium
- gambio gxGambio GX before 4.0.1.0 allows SQL Injection in admin/mobile.php.4.9 Medium
- gambio gxGambio GX before 4.0.1.0 allows admin/admin.php CSRF.8.8 High
- gambio gxGambio GX before 4.0.1.0 allows XSS in admin/coupon_admin.php.4.8 Medium
- ncp-e secure enterprise clientNCP Secure Enterprise Client before 10.15 r47589 allows a symbolic link attack on enumusb.reg via...7.8 High
- concretecms concrete cmsUnrestricted Uploads in Concrete57.2 High
- shopwareShopware vulnerable to SSRF8.8 High
- shopwareShopware vulnerable to Cross-site Scripting5.4 Medium
- shopwareShopware database password is leaked to an unauthenticated users7.5 High
- claws-mail, fedoraproject fedora +1 moreIn imap_scan_tree_recursive in Claws Mail through 3.17.6, a malicious IMAP server can trigger...7.5 High
- dell emc openmanage server administrator, open manage server administrator +1 moreDell EMC OpenManage Server Administrator (OMSA) versions 9.4 and prior contain multiple path...9.1 Critical
- netgear r6700, r6700 firmware +1 moreThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected...6.3 Medium
- netgear r6700, r6700 firmware +1 moreThis vulnerability allows network-adjacent attackers to bypass authentication on affected...8.8 High
- netgear r6700, r6700 firmware +1 moreThis vulnerability allows network-adjacent attackers to disclose sensitive information on...6.5 Medium
- netgear r6700, r6700 firmware +1 moreThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected...8.8 High
- netgear r6700, r6700 firmware +1 moreThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected...8.4 High
- netgear r6700, r6700 firmware +1 moreThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected...7.5 High
- netgear r6700, r6700 firmware +1 moreThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected...7.5 High
- netgear r6700, r6700 firmware +1 moreThis vulnerability allows network-adjacent attackers to compromise the integrity of downloaded...7.5 High
- netgear r6700, r6700 firmware +1 moreThis vulnerability allows network-adjacent attackers to bypass authentication on affected...8.8 High
- netgear r6700, r6700 firmware +1 moreThis vulnerability allows network-adjacent attackers to bypass authentication on affected...6.5 Medium
- samsung open source one, veeam one firmware +1 moreThis vulnerability allows remote attackers to disclose sensitive information on affected...7.5 High
- samsung open source one, veeam one firmware +1 moreThis vulnerability allows remote attackers to disclose sensitive information on affected...7.5 High
- centos web panel web panel, centos-webpanel centos web panel, control-webpanel webpanel +2 moreThis vulnerability allows remote attackers to disclose sensitive information on affected...7.5 High
- centos web panel web panel, centos-webpanel centos web panel, control-webpanel webpanel +2 moreThis vulnerability allows remote attackers to disclose sensitive information on affected...7.5 High
- centos web panel web panel, centos-webpanel centos web panel, control-webpanel webpanel +2 moreThis vulnerability allows remote attackers to disclose sensitive information on affected...7.5 High
- centos web panel web panel, centos-webpanel centos web panel, control-webpanel webpanel +2 moreThis vulnerability allows remote attackers to disclose sensitive information on affected...7.5 High
- centos web panel web panel, centos-webpanel centos web panel, control-webpanel webpanel +2 moreThis vulnerability allows remote attackers to disclose sensitive information on affected...7.5 High
- Show moreLoading…